<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 07:01:40 +0000</lastBuildDate>
    <item>
      <title>bdu:2025-05405</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2025-05405</link>
      <description>bdu:2025-05405</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2025-05405</guid>
    </item>
    <item>
      <title>BELL-CVE-2025-4207</title>
      <link>https://cve.radiocsirt.org/vuln/bell-cve-2025-4207</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Alpaquita:23: postgresql15, Alpaquita:stream: postgresql17&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Alpaquita:23: postgresql15, Alpaquita:stream: postgresql17&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bell-cve-2025-4207</guid>
    </item>
    <item>
      <title>BIT-postgresql-2025-4207 — PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation</title>
      <link>https://cve.radiocsirt.org/vuln/bit-postgresql-2025-4207</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Bitnami: postgresql&lt;/p&gt;
&lt;p&gt;Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination.  This affects the database server and also libpq.  Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Bitnami: postgresql&lt;/p&gt;
&lt;p&gt;Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination.  This affects the database server and also libpq.  Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bit-postgresql-2025-4207</guid>
    </item>
    <item>
      <title>certfr-2025-avi-0380 — Une vulnérabilité a été découverte dans PostgreSQL. Elle permet à un attaquant de provoquer un déni de service à distan…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2025-avi-0380</link>
      <description>certfr-2025-avi-0380</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2025-avi-0380</guid>
    </item>
    <item>
      <title>Withdrawn: CLEANSTART-2026-KA40024 — PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access</title>
      <link>https://cve.radiocsirt.org/vuln/cleanstart-2026-ka40024</link>
      <description>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; CleanStart: postgresql&lt;/p&gt;
&lt;p&gt;Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; CleanStart: postgresql&lt;/p&gt;
&lt;p&gt;Multiple security vulnerabilities affect the postgresql package. PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. See references for individual vulnerability details.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cleanstart-2026-ka40024</guid>
    </item>
    <item>
      <title>EUVD-2026-238710</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-238710</link>
      <description>EUVD-2026-238710</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-238710</guid>
    </item>
    <item>
      <title>fkie_cve-2025-4207</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2025-4207</link>
      <description>&lt;p&gt;Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination.  This affects the database server and also libpq.  Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination.  This affects the database server and also libpq.  Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2025-4207</guid>
    </item>
    <item>
      <title>GHSA-6x46-2273-xjjf</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-6x46-2273-xjjf</link>
      <description>&lt;p&gt;Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination.  This affects the database server and also libpq.  Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination.  This affects the database server and also libpq.  Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-6x46-2273-xjjf</guid>
    </item>
    <item>
      <title>msrc_CVE-2025-4207 — PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2025-4207</link>
      <description>msrc_CVE-2025-4207</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2025-4207</guid>
    </item>
    <item>
      <title>OESA-2025-1508 — postgresql-13 security update</title>
      <link>https://cve.radiocsirt.org/vuln/oesa-2025-1508</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:20.03-LTS-SP4: postgresql-13&lt;/p&gt;
&lt;p&gt;PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you&amp;amp;amp;apos;ll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system.  These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection.  The PostgreSQL server can be found in the postgresql-server sub-package.&#13;
&#13;
Security Fix(es):&lt;/p&gt;
&lt;p&gt;Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination.  This affects the database server and also libpq.  Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.(CVE-2025-4207)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; openEuler:20.03-LTS-SP4: postgresql-13&lt;/p&gt;
&lt;p&gt;PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you&amp;amp;amp;apos;ll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system.  These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection.  The PostgreSQL server can be found in the postgresql-server sub-package.&#13;
&#13;
Security Fix(es):&lt;/p&gt;
&lt;p&gt;Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination.  This affects the database server and also libpq.  Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.(CVE-2025-4207)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/oesa-2025-1508</guid>
    </item>
    <item>
      <title>openSUSE-SU-2025:15137-1 — postgresql13-13.21-1.1 on GA media</title>
      <link>https://cve.radiocsirt.org/vuln/opensuse-su-2025:15137-1</link>
      <description>&lt;p&gt;postgresql13-13.21-1.1 on GA media&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;postgresql13-13.21-1.1 on GA media&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/opensuse-su-2025:15137-1</guid>
    </item>
    <item>
      <title>SUSE-SU-2025:01644-1 — Security update for postgresql17</title>
      <link>https://cve.radiocsirt.org/vuln/suse-su-2025:01644-1</link>
      <description>&lt;p&gt;Security update for postgresql17&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for postgresql17&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/suse-su-2025:01644-1</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2025-4207</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4207</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:Pro:16.04:LTS: postgresql-9.5, Ubuntu:Pro:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14, Ubuntu:24.04:LTS: postgresql-16&lt;/p&gt;
&lt;p&gt;Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination.  This affects the database server and also libpq.  Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:Pro:16.04:LTS: postgresql-9.5, Ubuntu:Pro:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14, Ubuntu:24.04:LTS: postgresql-16&lt;/p&gt;
&lt;p&gt;Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination.  This affects the database server and also libpq.  Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4207</guid>
    </item>
    <item>
      <title>WID-SEC-W-2025-0986 — PostgreSQL: Schwachstelle ermöglicht Denial of Service</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0986</link>
      <description>&lt;p&gt;Ein entfernter, anonymer Angreifer kann eine Schwachstelle in PostgreSQL ausnutzen, um einen Denial of Service Angriff durchzuführen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein entfernter, anonymer Angreifer kann eine Schwachstelle in PostgreSQL ausnutzen, um einen Denial of Service Angriff durchzuführen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0986</guid>
    </item>
  </channel>
</rss>
